azure - 使用 terraform 为 Azure 应用程序网关添加重定向规则

Question

如何为 azurerm_application_gateway 添加重定向规则？在 azure 门户上有一个复选框“重定向配置”，但我因此没有找到 terraform 元素。

Answer 1

因此，现在可以从 terraform 实现这一点，您可以使用 redirect_configuration block ，这里是文档: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/application_gateway#redirect_configuration

以下是添加 azurerm_application_gateway 资源所需的内容列表:

• 2 个 frontend_port(一个用于 80 和 443)
• 2 个 http_listener(一个用于 Http 和 Https)
• 2 个 request_routing_rule(一个用于 Http 和 Https)
• 1 重定向配置(从 http 重定向到 https)

注意:如果您没有在http_listener上设置host_name，必须创建多个 frontend_port block 。

它看起来像这样:

resource "azurerm_application_gateway" "example" {
  ...

  # Https Port
  frontend_port {
    name = "port-https"
    port = 443
  }

  # Http Port
  frontend_port {
    name = "port-http"
    port = 80
  }

  # Https Listener
  http_listener {
    name                           = "https-listener"
    frontend_ip_configuration_name = "<frontend_ip_configuration_name>"
    frontend_port_name             = "port-https"
    host_name                      = "<host_name>"
    protocol                       = "Https"
    require_sni                    = true
    ssl_certificate_name           = "<ssl_certificate_name>"
  }

  # Http Listener
   http_listener {
    name                           = "http-listener"
    frontend_ip_configuration_name = "<frontend_ip_configuration_name>"
    frontend_port_name             = "port-http"
    host_name                      = "<host_name>"
    protocol                       = "Http"
  }

  # Request routing rule for Https
  request_routing_rule {
    name                       = "routing-https"
    http_listener_name         = "https-listener"
    backend_address_pool_name  = "<backend_address_pool_name>"
    backend_http_settings_name = "<backend_http_settings_name>"
    rule_type                  = "Basic"
  }

  # Request routing rule for Http
  request_routing_rule {
    name                        = "routing-http"
    http_listener_name          = "http-listener"
    redirect_configuration_name = "redirect-config-https"
    rule_type                   = "Basic"
  }

  # Request Configuration for Https
  redirect_configuration {
    name                 = "redirect-config-https"
    target_listener_name = "https-listener"
    redirect_type        = "Permanent"
    include_path         = true
    include_query_string = true
  }

...
}